Privacy policy

1. Who is responsible

The controller under Article 4 (7) GDPR is Zeynoc, Quadtstraße, 47138 Duisburg, Germany. Email: privacy@zeynoc.com. Full details are in our legal notice.

We are not required to appoint a data protection officer. For any privacy question, write to the address above.

2. The short version

• No analytics, no tracking pixels, no advertising cookies.
• No cookies at all are set by this website, so there is no cookie banner.
• The booking calendar from Cal.com loads only when you click to open it.
• Fonts are served from our own domain. Your browser does not contact Google or any font service.
• If you use the contact form or email us, we use your details only to reply and to run the project.

3. Hosting and server logs

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When you visit a page, the hosting servers process technical data your browser sends: IP address, date and time, the page requested, referrer, browser type and operating system. This is needed to deliver the website and to protect it against attacks.

Legal basis: Article 6 (1) (f) GDPR. Our legitimate interest is a secure and working website. Logs are kept for a short period by the host and then deleted. We have a data processing agreement with Vercel. Vercel is certified under the EU US Data Privacy Framework, and Standard Contractual Clauses apply as an extra safeguard.

4. Contact form and email

When you send us a message, we process the details you give us: name, email address, company, your project details and anything else you choose to write. We use them only to answer your enquiry and, if we work together, to prepare and carry out the project.

Legal basis: Article 6 (1) (b) GDPR for steps before a contract, and Article 6 (1) (f) GDPR for general enquiries. Messages from the form are delivered to our inbox by Resend (Plus Five Five, Inc., USA), acting as our processor under a data processing agreement and Standard Contractual Clauses.

We delete enquiries that do not lead to a project after 12 months. If we work together, records are kept for as long as tax and commercial law requires, usually 6 to 10 years in Germany.

5. Booking a call

You can book a call through a calendar provided by Cal.com, Inc., USA. The calendar is not loaded when you visit a page. It loads only when you click a booking button or “Show available times”. From that moment Cal.com receives your IP address and technical data from your browser, and, if you book, the details you enter: name, email address, any notes and the time you choose. Cal.com may store data needed to run the booking in your browser within its own window.

Legal basis: Art. 6 (1) (b) GDPR for arranging the call you ask for, and Art. 6 (1) (a) GDPR for loading the calendar, which you choose by clicking. Cal.com processes the data for us under a data processing agreement. Data is transferred to the USA on the basis of Standard Contractual Clauses. We keep booking details for as long as we need them to prepare and follow up the call, and at most 12 months if no project follows.

6. Client project data

Data you share with us as part of a project, such as images, video or documents, is covered by the project contract and a separate data processing agreement under Article 28 GDPR. This policy does not cover that data. See our security page and responsible AI policy for how we handle it.

7. External links

We link to other websites, for example our clients and GitHub. When you click a link, the other site receives your data under its own privacy policy. Nothing is sent to them until you click.

8. Your rights

Under the GDPR you have the right to:

• get a copy of the data we hold about you (Article 15)
• have wrong data corrected (Article 16)
• have your data deleted (Article 17)
• have processing restricted (Article 18)
• receive your data in a portable format (Article 20)
• object to processing based on legitimate interests (Article 21)
• withdraw consent at any time, with effect for the future (Article 7 (3))

To use any of these rights, email privacy@zeynoc.com. You also have the right to complain to a supervisory authority. The authority for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Kavalleriestraße 2 bis 4, 40213 Düsseldorf.

9. Do you have to give us data?

No. You can read this website without giving us any personal data. To get a reply to an enquiry we need at least your name and email address.

10. Automated decisions

We do not use automated decision making or profiling under Article 22 GDPR on this website.

11. Changes

We update this policy when the website or the law changes. The date at the top shows the latest version.